Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
File:                     x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json)
Hash identifier:          ZbezhQx5eIr/6CGeufvTQV6YeYrDVHqEi6yiCInNFcM=
Subject key identifier:   18:34:07:64:E6:99:33:70:01:78:7B:5F:A9:50:E9:7A:15:95:D6:91
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Certificate issuer:       /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial:       019F95B75DD1FB5BBF8A436DBEC0AAC41D8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 20:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:49 +0000
Files and hashes:         1: wWaQX5rvrS24Hznd7N3fDWXJd9I.roa (hash: fT4yvetY/MA9WwLBmvhYQk4S1AH3yU1r+ty6ON2yEVY=)
                          2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: nblDRGkP4cLfXasa3Mm9d4c/fd7jm97cY7ZuFVoyR6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:5d:d1:fb:5b:bf:8a:43:6d:be:c0:aa:c4:1d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
        Validity
            Not Before: Jul 24 20:00:49 2026 GMT
            Not After : Jul 25 20:00:49 2026 GMT
        Subject: CN=18340764e699337001787b5fa950e97a1595d691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:18:ff:53:31:8c:d4:31:68:17:4d:c4:a3:47:
                    8a:70:55:f4:c9:9a:0c:11:32:04:07:0b:a7:18:f4:
                    fc:5b:ed:cb:f8:3d:52:4e:af:73:66:8f:9b:08:16:
                    d2:c8:9d:5f:82:40:32:cd:7b:48:85:c8:bb:8e:d9:
                    ee:12:f4:07:59:8a:7c:a4:22:0b:a6:0b:e1:16:e7:
                    22:8a:15:bf:6e:15:21:cb:1b:37:48:84:2a:50:30:
                    bb:f2:a3:7d:8f:7a:76:87:19:c4:b8:19:82:7a:8d:
                    ad:48:c9:08:49:de:1e:6e:46:b9:58:1e:9c:10:0f:
                    4a:23:de:75:f0:58:7e:be:10:d0:4d:03:56:18:21:
                    eb:f4:d1:a3:1d:78:d6:ed:44:b2:aa:b8:d7:1a:27:
                    0d:1c:8d:15:8b:06:54:17:d6:98:30:00:03:84:5e:
                    fe:20:8c:71:de:b6:00:53:82:92:be:45:51:df:a3:
                    63:02:74:69:bc:63:41:b1:c6:6d:92:7e:cd:0d:f4:
                    63:65:2e:5c:b4:6d:30:b9:a8:6f:4d:6b:9b:7a:4b:
                    cb:37:eb:9b:49:2c:21:65:86:6b:a3:57:51:7a:a5:
                    af:53:62:cb:a2:c3:4e:07:a0:35:45:2d:d7:2a:ff:
                    37:b0:48:e2:7a:8d:e4:19:4c:64:ce:2a:de:9b:ee:
                    71:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:34:07:64:E6:99:33:70:01:78:7B:5F:A9:50:E9:7A:15:95:D6:91
            X509v3 Authority Key Identifier:
                keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:30:84:2b:68:98:ee:34:99:e7:2f:ed:73:95:fe:df:2d:d4:
         b9:8b:d7:3b:d3:78:a1:85:58:40:b8:6a:69:a7:57:dc:fa:25:
         c0:f0:f3:72:8c:80:77:90:6d:86:4f:83:02:95:8d:de:17:0b:
         37:b1:d2:93:ac:e3:90:c8:60:44:f9:a0:90:b9:f0:45:2a:9a:
         19:12:5d:fb:c9:65:ae:02:64:c3:56:d4:a9:8e:25:f8:bd:a1:
         29:0b:75:c6:3f:03:53:b0:6d:88:96:c7:68:27:78:bf:8c:ee:
         a9:78:23:0b:cf:03:09:94:89:a2:19:7f:ad:2f:64:6f:ec:4b:
         c1:94:32:47:32:e9:84:a9:2b:53:55:af:86:5d:dc:31:db:68:
         98:01:63:5d:53:95:eb:ab:cb:a7:b9:df:58:1c:4b:5b:0f:83:
         b7:ec:92:db:8f:40:3b:1c:e6:10:1f:1b:f9:58:d0:0b:d1:e1:
         69:74:82:91:64:b2:21:36:58:51:27:c7:4b:de:fc:d5:9a:80:
         f3:5c:e9:cc:a3:84:3b:05:e7:08:3d:c6:19:27:25:8c:e3:1f:
         e9:57:95:6a:6c:8c:ec:7e:73:82:fc:53:13:3d:8a:f4:39:0f:
         c0:73:54:02:4c:ab:d9:2e:26:96:0a:32:1f:6a:a0:a2:a4:cf:
         f5:01:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:14:17 2026 by rpki-client